From 1648efd5429f732f583165e342bdcae31311003c Mon Sep 17 00:00:00 2001 From: "stepsecurity-app[bot]" <188008098+stepsecurity-app[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 14:31:00 +0000 Subject: [PATCH] [StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot --- .github/dependabot.yml | 12 ++++++++++++ .github/workflows/ci.yml | 2 +- 2 files changed, 13 insertions(+), 1 deletion(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..a9c1b32 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,12 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + groups: + external-github-actions: + patterns: + - '*/*' + exclude-patterns: + - Tricentis*/* diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9cacc7d..6ca50be 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -9,7 +9,7 @@ on: jobs: check: name: Build and lint - runs-on: ubuntu-latest + runs-on: ubuntu-stepsecurity-x64 steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0